Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa
File:                     3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa (raw, json)
Hash identifier:          Nt2mbWOMPaZ/NYxxCIazMnP+Vlp2vhY6MCkA1fWK7dM=
Subject key identifier:   9A:F3:CE:5D:2A:41:BC:55:BD:5E:37:0B:BB:28:21:7C:56:4D:A9:4F
Certificate issuer:       /CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
Certificate serial:       68D8EC0EF2AE9C33812F4E3248B52D21D85BD8E7
Authority key identifier: 43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa
Signing time:             Tue 05 Mar 2024 18:18:39 +0000
ROA not before:           Tue 05 Mar 2024 18:13:39 +0000
ROA not after:            Tue 04 Mar 2025 18:18:39 +0000
asID:                     52253
IP address blocks:        190.108.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl
                          rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d8:ec:0e:f2:ae:9c:33:81:2f:4e:32:48:b5:2d:21:d8:5b:d8:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14
        Validity
            Not Before: Mar  5 18:13:39 2024 GMT
            Not After : Mar  4 18:18:39 2025 GMT
        Subject: CN=9AF3CE5D2A41BC55BD5E370BBB28217C564DA94F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:51:34:72:d6:77:ac:75:1f:25:b5:4a:dc:86:
                    8c:46:90:33:e4:3e:0b:84:4a:82:44:f7:d6:03:8c:
                    b5:94:e9:e2:3b:ca:fa:e0:18:a8:70:2d:1f:c0:d7:
                    50:ec:94:57:cb:07:20:fb:28:98:c8:0a:fb:2b:e5:
                    b6:cb:d1:89:d9:9d:a5:e2:37:c1:7e:36:a6:24:ff:
                    25:27:b9:dc:51:9a:4a:35:cf:4e:73:e0:6d:51:0a:
                    59:e4:7e:bf:79:b2:56:6d:65:3c:ab:ea:d9:7e:bb:
                    c3:19:4d:73:cd:e9:de:bc:34:47:e7:5e:f3:01:98:
                    a9:6e:fb:ff:45:54:43:6b:d7:39:f9:7e:a3:6e:9d:
                    4f:68:46:cc:b8:fe:5b:d6:35:ff:9f:25:7d:f3:99:
                    b7:0b:7f:a4:77:0d:46:a1:9f:eb:ab:df:99:ef:8d:
                    f1:3f:c9:37:08:a2:f3:43:c0:e8:49:cc:67:74:af:
                    4a:8a:0a:fe:5c:68:bf:82:93:db:77:5c:35:b3:19:
                    b0:da:4f:0f:68:7f:a1:58:1f:05:24:1a:a3:66:45:
                    fc:a2:bb:ea:87:c1:3b:8a:8f:ea:12:b4:94:33:77:
                    58:27:12:76:7c:05:8b:9b:df:ca:98:9e:81:2b:3d:
                    e6:ce:0d:0e:24:80:9b:20:f2:6d:11:e6:c8:dc:94:
                    e7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F3:CE:5D:2A:41:BC:55:BD:5E:37:0B:BB:28:21:7C:56:4D:A9:4F
            X509v3 Authority Key Identifier:
                keyid:43:0B:8C:C1:EC:30:DC:6E:F3:BF:59:36:9D:AA:6F:85:C0:22:BC:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/430B8CC1EC30DC6EF3BF59369DAA6F85C022BC14.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/636FF6D8D8EC63E16B2FEC4411B685E89C831C4E1924C0D16A5BF1D9FFD965EE/0/3139302e3130382e3231342e302f32342d3234203d3e203532323533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.108.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:32:92:91:5d:96:bb:ec:2e:65:ec:3f:c8:f2:e4:ed:3a:b2:
         ba:c6:d7:76:73:e2:8a:a8:43:46:37:68:c7:1a:5d:33:94:3d:
         ca:e3:20:5f:11:80:01:c9:19:2a:35:4c:16:71:36:f5:8c:be:
         d4:54:83:3d:97:07:8f:72:88:40:90:ab:59:21:d6:9a:2d:94:
         cd:6b:78:0f:2b:7f:a3:7d:f1:be:a6:fc:8b:b0:e3:37:8e:7e:
         15:f8:ce:9f:03:fe:ef:4a:d0:01:3f:63:39:3d:78:d0:0a:7d:
         f0:90:c5:f5:cf:03:df:cd:15:b1:dd:a3:3f:cf:09:96:89:06:
         e3:dd:9f:c4:93:0b:12:ae:57:42:75:1a:3b:d2:48:f3:22:35:
         60:0f:87:71:2c:67:56:7b:9e:e3:a4:a9:54:33:53:e2:0d:6d:
         e6:8a:95:3b:db:8c:c5:55:7a:da:7a:32:1d:73:79:cb:3e:82:
         3c:a0:8f:09:a3:58:39:ad:df:c7:5d:1f:45:42:c3:0f:5e:8a:
         44:6a:fb:9c:87:09:bc:4b:01:53:c3:cd:9f:87:77:28:85:12:
         72:2f:a4:78:18:24:bc:72:52:5f:78:8c:3c:a5:40:04:0f:ee:
         42:a3:27:4c:e9:f8:a4:c7:20:cf:0a:31:f7:63:9d:58:49:fa:
         56:d2:94:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org